Domain

sdf.imageanalysis.core.microsoft

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .microsoft TLD

Run a live full scan of sdf.imageanalysis.core.microsoft

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

A/AAAA targets

Subdomains

—

CT + scan + body

Record Types

seen in DNS

Observed Certs

in our scans

DNS Records

52.109.0.147

AAAA

—

TXT

—

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

52.109.0.208:443 33311b9c24ec…

Subject: imganalysissvc.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 10

SANs: *.imageanalysis.core.microsoft, *.imganalysissvc.edog.officeapps.live.com, *.imganalysissvc.officeapps.live.com, imageanalysis.core.microsoft, imganalysissvc.edog.officeapps.live.com, imganalysissvc.officeapps.live.com, sdf.imageanalysis.core.microsoft

52.111.231.43:443 6831825487fb…

Subject: imganalysissvc.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

20.226.80.174:443 f425fe761a07…

Subject: imganalysissvc.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 10

20.111.46.230:443 6831825487fb…

Subject: imganalysissvc.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

20.212.161.69:443 b5ffa88bbace…

Subject: imganalysissvc.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 04

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

7e92c70b13a2f950… google · xenon2026h2

Subject: imganalysissvc.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 10

SANs: imganalysissvc.officeapps.live.com, *.imganalysissvc.officeapps.live.com, imganalysissvc.edog.officeapps.live.com, *.imganalysissvc.edog.officeapps.live.com, sdf.imageanalysis.core.microsoft, imageanalysis.core.microsoft, *.imageanalysis.core.microsoft

Valid: 2026-04-03 15:00:52 → 2026-09-30 15:00:52

269a52176154e2ba… google · xenon2026h2

Subject: imganalysissvc.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

Valid: 2026-04-03 09:40:13 → 2026-09-30 09:40:13

86d24baa46a8affb… google · xenon2026h2

Subject: imganalysissvc.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 04

Valid: 2026-04-03 08:19:14 → 2026-09-30 08:19:14

a4c3a571ecbdd536… google · xenon2026h2

Subject: imganalysissvc.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 10

Valid: 2026-04-03 00:50:57 → 2026-09-30 00:50:57

589ad533f863d0b2… google · xenon2026h2

Subject: imganalysissvc.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

Valid: 2026-03-29 20:06:01 → 2026-09-25 20:06:01

c397ba55a3d49b22… google · xenon2026h2

Subject: imganalysissvc.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 04

Valid: 2026-03-29 18:57:32 → 2026-09-25 18:57:32

e0baccce979b07c3… google · xenon2026h2

Subject: imganalysissvc.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 04

Valid: 2026-03-29 18:57:32 → 2026-09-25 18:57:32

b8a810f54e974c37… google · xenon2026h2

Subject: imganalysissvc.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

Valid: 2026-03-29 18:30:47 → 2026-09-25 18:30:47

7679096f6195b18b… google · xenon2026h2

Subject: imganalysissvc.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: imganalysissvc.officeapps.live.com, *.imganalysissvc.officeapps.live.com, imganalysissvc.edog.officeapps.live.com, *.imganalysissvc.edog.officeapps.live.com, imageanalysis.core.microsoft, *.imageanalysis.core.microsoft, sdf.imageanalysis.core.microsoft

Valid: 2026-03-29 17:26:40 → 2026-09-25 17:26:40

790ce0afa09776a8… google · xenon2026h2

Subject: imganalysissvc.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

SANs: imganalysissvc.officeapps.live.com, *.imganalysissvc.officeapps.live.com, imganalysissvc.edog.officeapps.live.com, *.imganalysissvc.edog.officeapps.live.com, imageanalysis.core.microsoft, *.imageanalysis.core.microsoft, sdf.imageanalysis.core.microsoft

Valid: 2026-03-29 17:26:09 → 2026-09-25 17:26:09

71f9a49779f20421… google · xenon2026h2

Subject: imganalysissvc.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

Valid: 2026-03-29 08:56:33 → 2026-09-25 08:56:33

ce42a0f8baefaf8f… google · xenon2026h2

Subject: imganalysissvc.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

Valid: 2026-03-29 08:56:33 → 2026-09-25 08:56:33

0b9680f4bb7b7529… google · xenon2026h2

Subject: imganalysissvc.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 10

Valid: 2026-03-29 06:04:54 → 2026-09-25 06:04:54

c9c990b5ba17d77f… google · xenon2026h2

Subject: imganalysissvc.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

Valid: 2026-03-29 06:01:35 → 2026-09-25 06:01:35

d68a6a1bd74ebc0e… google · xenon2026h2

Subject: imganalysissvc.edog.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: imganalysissvc.edog.officeapps.live.com, *.imganalysissvc.edog.officeapps.live.com, sdf.imageanalysis.core.microsoft, *.imageanalysis.core.microsoft

Valid: 2026-03-28 18:46:08 → 2026-09-24 18:46:08

3b391d8768038057… google · xenon2026h2

Subject: imganalysissvc.edog.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: imganalysissvc.edog.officeapps.live.com, *.imganalysissvc.edog.officeapps.live.com, sdf.imageanalysis.core.microsoft, *.imageanalysis.core.microsoft

Valid: 2026-03-28 12:13:09 → 2026-09-24 12:13:09

efc7ddde9bc9f211… google · xenon2026h2

Subject: imganalysissvc.edog.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: imganalysissvc.edog.officeapps.live.com, *.imganalysissvc.edog.officeapps.live.com, sdf.imageanalysis.core.microsoft, *.imageanalysis.core.microsoft

Valid: 2026-03-28 12:13:09 → 2026-09-24 12:13:09

59d6e09436d70d76… google · xenon2026h2

Subject: imganalysissvc.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

Valid: 2026-02-18 18:38:57 → 2026-08-17 18:38:57

a3880f2bf25d8886… google · xenon2026h2

Subject: imganalysissvc.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

Valid: 2026-02-18 18:37:09 → 2026-08-17 18:37:09

26442d474ab15386… google · xenon2026h2

Subject: imganalysissvc.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

Valid: 2026-02-18 18:37:09 → 2026-08-17 18:37:09

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
A	52.109.0.147	2026-06-22 09:52:32.536	2026-07-25 21:24:24.275